Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bdd7fcf3-6933-3769-b5c4-d74eb6c78c21.roa
File:                     bdd7fcf3-6933-3769-b5c4-d74eb6c78c21.roa (raw, json)
Hash identifier:          4xXCXqBU2fyBO4Ejibxc91OtXTjyeuuBy9N9XWQ2jVs=
Subject key identifier:   B7:EA:37:13:BA:D3:29:A1:02:3C:AB:CC:A6:8D:E5:F9:98:A3:05:18
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285844E8F625BA5A466BF5125F6080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bdd7fcf3-6933-3769-b5c4-d74eb6c78c21.roa
Signing time:             Fri 16 Feb 2024 11:42:38 +0000
ROA not before:           Fri 16 Feb 2024 11:42:38 +0000
ROA not after:            Thu 16 May 2024 10:42:38 +0000
asID:                     3356
IP address blocks:        206.164.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e8:f6:25:ba:5a:46:6b:f5:12:5f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 16 11:42:38 2024 GMT
            Not After : May 16 10:42:38 2024 GMT
        Subject: CN=c20e317c-54d4-4f85-837d-f2f0da37ec57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:fb:60:61:3f:d3:02:80:f2:ed:f8:62:06:
                    a4:70:77:c3:70:38:a2:9a:72:85:36:0f:f1:1f:b4:
                    b0:34:22:18:a2:69:14:f6:5f:2b:3d:98:fb:e5:6e:
                    bc:ea:65:dc:5e:03:b8:0c:86:e8:2f:38:02:35:ff:
                    0c:3e:fd:4a:60:1a:92:ef:8b:ff:5b:9c:47:05:a0:
                    e3:6c:0a:3a:a0:59:70:62:2b:7d:81:22:6a:d3:1a:
                    17:26:3b:3c:f7:f3:e7:07:7c:b2:b3:54:b8:00:31:
                    7f:20:a5:d6:31:af:6a:ad:56:b5:a0:00:f4:76:db:
                    37:e4:89:b3:30:d3:a5:96:62:0a:3e:63:2d:fe:1c:
                    d5:e6:2d:36:58:82:02:9c:e9:13:56:6c:0d:af:48:
                    0c:ff:ab:71:1e:bc:66:4b:4c:8d:a2:dc:ba:fc:44:
                    0f:56:e4:7f:d4:c9:52:15:38:fc:c5:b2:13:06:17:
                    15:76:58:c8:db:42:c7:48:f8:cf:6e:09:df:c5:25:
                    2c:5e:f4:f2:d2:3b:71:70:7a:3f:88:03:89:e0:a8:
                    a8:27:31:d7:e5:5d:d5:24:a5:c9:11:d3:75:96:a4:
                    97:3e:d0:c8:cb:f3:56:81:03:86:e7:77:34:d2:91:
                    cf:f0:83:76:70:28:53:a9:55:36:aa:96:50:30:1b:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:37:13:BA:D3:29:A1:02:3C:AB:CC:A6:8D:E5:F9:98:A3:05:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bdd7fcf3-6933-3769-b5c4-d74eb6c78c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:44:ef:b9:9e:3c:2c:6a:be:ab:35:ba:e9:db:ab:95:1d:
         41:21:b5:e5:1e:34:72:41:de:4f:df:8f:4a:b9:73:82:f4:ad:
         21:a6:a7:80:c6:0f:89:9b:ab:ac:2c:c1:20:c2:ae:12:98:fa:
         3d:f7:2a:31:4e:f9:33:34:65:5c:ab:d5:44:1b:9d:3f:df:38:
         43:43:a5:5c:78:08:04:65:8f:3b:ea:f4:92:16:b6:fa:bd:2f:
         e4:52:38:b7:e4:1f:85:f6:12:59:8f:d3:b2:20:2e:73:98:b0:
         11:a1:85:4e:98:7a:e3:95:57:72:ae:0a:24:af:3e:1c:f0:34:
         16:9c:d7:c4:3c:3a:a4:33:ac:dd:61:b8:e0:3b:5b:93:28:4d:
         e0:2e:fa:08:1b:ef:01:0e:8b:89:1c:0f:e6:9c:24:3a:5e:10:
         03:f4:d9:c4:e2:cc:2d:86:da:d1:4f:b4:cd:4f:89:41:f4:3a:
         74:83:11:92:b5:6f:f4:76:48:65:21:d6:75:e2:ca:4c:86:38:
         ef:69:e7:6c:69:08:5f:6b:c0:83:66:20:9d:e5:81:cc:bc:1f:
         83:db:41:9f:85:13:1d:16:7f:5f:12:b1:45:6b:53:aa:51:81:
         ea:82:34:ff:9a:10:62:59:52:02:39:5c:87:ef:0f:7b:b5:31:
         7e:1b:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:38 2024 by rpki-client on console-ams.rpki-client.org